getAclObjectIdentity

Indicates the domain object instance that is subject of this BasicAclEntry. This
information may be of interest to relying classes (voters and business methods) that wish to know the actual
origination of the ACL entry (so as to distinguish individual ACL entries from others contributed by the
inheritance hierarchy).

Returns:

the ACL object identity that is subject of this ACL entry (never null)

getRecipient

A domain object instance will usually have multiple BasicAclEntrys. Each separate
BasicAclEntry applies to a particular "recipient". Typical examples of recipients include (but do
not necessarily have to include) usernames, role names, complex granted authorities etc.

It is
essential that only one BasicAclEntry exists for a given recipient. Otherwise conflicts as to
the mask that should apply to a given recipient will occur.

This method indicates which recipient this BasicAclEntry applies to. The returned
object type will vary depending on the type of recipient. For instance, it might be a String
containing a username, or a GrantedAuthorityImpl containing a complex granted authority that is
being granted the permissions contained in this access control entry. The EffectiveAclsResolver and
BasicAclProvider.getAcls(Object,org.springframework.security.Authentication) can process the different recipient
types and return only those that apply to a specified Authentication object.

setAclObjectParentIdentity

aclObjectParentIdentity - an object which represents the parent of the domain object instance subject of
this ACL entry, or null if either the domain object instance has no parent or its parent
should be not used to compute an inheritance hierarchy